Privacy Policy
Last updated: July 2026
At a glance:
This Privacy Policy ("Policy") explains how NEWay ("NEWay", "we", "us", or "our"), operated by Hoppity Learning Inc., a Delaware corporation headquartered in California, collects, uses, discloses, and protects your information when you use our website, waitlist, and mobile application (together, the "Services").
NEWay is an educational support tool for parents, legal guardians, and teachers. It is not a medical, psychological, therapeutic, diagnostic, or crisis service.
We are committed to collecting as little personal data as reasonably necessary to provide meaningful, non-clinical parenting support, while complying with applicable privacy laws, including the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA"), the California Online Privacy Protection Act ("CalOPPA"), California Civil Code §§ 1798.83 et seq. ("Shine the Light"), the federal Children's Online Privacy Protection Act ("COPPA"), and — where the Services are enabled by a school or program — the Family Educational Rights and Privacy Act ("FERPA"), California's Student Online Personal Information Protection Act ("SOPIPA"), and California's Early Learning Personal Information Protection Act ("ELPIPA"), United States federal law.
NEWay is a product of Hoppity Learning Inc., a corporation organized under the laws of the State of Delaware, United States, with its principal place of business in California ("we", "us", "our").
For most processing activities described in this Policy, Hoppity Learning Inc. acts as a "business" under the CCPA and a data controller under other applicable laws — meaning we decide how and why your personal information is processed.
In limited cases, when we process personal information solely on behalf of another organization that has its own relationship with you, we may act as a "service provider" under the CCPA, or as a data processor under other laws. In those situations, our processing is governed by our agreement with that organization.
Where a preschool, school, daycare, or other early-childhood program (a "Program") enables the messaging feature for its staff and families, we act as a service provider / data processor to that Program with respect to information about enrolled children and any "education records," and we process that information only on the Program's instructions under a separate written agreement. The Program is responsible for its own privacy practices and for obtaining any consents required before communication about a child begins.
To exercise your rights, please email support@NEWayHealth.com. We may need to verify your identity before responding to your request. In some cases, we may be unable to fully comply (for example, if we are legally required to retain certain records), but we will explain our reasoning where permitted by law.
In this Privacy Policy:
This Policy applies to:
The messaging feature between Program teachers and parents/guardians.
This Policy does not apply to third-party websites, apps, or services that may be linked from our Services. Those are governed by their own privacy policies and terms.
NEWay is designed for parents, legal guardians, and teachers who are at least 18 years old. We do not target children and do not knowingly collect personal information directly from children under 16.
If you are under 18, you must not attempt to create an Account or use the Services directly. If you are a parent or legal guardian and believe your child has provided personal information to us, please contact us so we can take appropriate steps to delete it.
Important: although children never use the Services directly, the messaging feature involves adults (teachers and parents) exchanging information about identifiable children. We describe how we handle that child information, and the children's-privacy and student-data laws that apply to it, in Sections 5.8, 12, and 13 below.
Express statement (CCPA § 1798.120(c)): We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.
We intentionally collect as little personal data as reasonably possible while still providing meaningful, non-clinical parenting support.
The categories of personal information we have collected about California consumers in the preceding 12 months, organized using the CCPA's category labels (Cal. Civ. Code § 1798.140(v)), are summarized in Section 5.7 below.
We intentionally avoid collecting information that directly identifies your child (such as full name, exact birthdate, address, or medical record numbers). We encourage you not to include sensitive child identifiers in free-text fields, except as necessary within the messaging feature, where limited identifiable child information is required to make communication between a teacher and the right parent possible (see Section 5.8). Even there, we ask you to share only what is reasonably necessary and to avoid medical, financial, or government-identifier details.
We do not intentionally collect or use the following categories of information:
When you use the Services, we may automatically collect:
We use cookies and similar technologies only to:
We do not use cookies for targeted advertising, retargeting, or cross-context behavioral tracking.
In general, our cookies fall into these categories:
You can usually configure your browser or device to block or delete cookies. If you disable essential or functional cookies, some parts of the Services may not work as intended.
Global Privacy Control (GPC). Because we do not sell or share personal information, there is no sale or sharing for an opt-out preference signal such as the Global Privacy Control (GPC) to stop. If our practices ever change, we will honor GPC signals as required by California regulations (Cal. Code Regs. tit. 11, § 7025).
Do Not Track (DNT). Some browsers can transmit a "Do Not Track" signal. Because no uniform industry standard for responding to DNT signals has been adopted, our Services do not currently respond to DNT signals. As explained above, we do not sell or share personal information, and we do not engage in targeted advertising or cross-context behavioral tracking regardless of any browser signal.
When you interact with NEWay's AI features (for example, by describing a scenario or asking for a script), your inputs and the AI-generated responses may be:
Where AI features are offered inside the messaging feature (such as helping draft, summarize, or translate a message), any child information you place into those features is processed only to provide the feature. We do not use child information or the contents of Messages to train public AI models or improve models for other customers, and AI does not monitor Messages for safety.
To provide AI-generated guidance, NEWay may send your prompts (and relevant context) to trusted third-party AI Providers such as OpenAI or Anthropic. These AI Providers process your data solely to generate responses and maintain system safety and security.
We require by written contract that AI Providers handle your data only on our documented instructions, qualify as service providers or contractors under the CCPA, and comply with applicable privacy laws. In particular, AI Providers may not:
In the preceding 12 months, NEWay has collected the following categories of personal information about California consumers, all directly from you or automatically from your interaction with the Services:
We collect: identifiers (such as email address, IP address, and account ID); California customer records (§ 1798.80(e), such as your email address); limited commercial information (such as subscription or transaction records via app stores); internet and network activity (such as browsing and usage data on the Services); approximate (IP-based) geolocation only, never precise geolocation; limited professional information, namely a Teacher User's role or Program affiliation; education information, namely Messages and child information exchanged via the messaging feature where they constitute education records; and limited inferences for personalization. We disclose these categories only to service providers for business purposes (and, for commercial information, to payment processors and app stores), and, for the messaging-related categories, to the relevant Program. We do not sell or share any of these categories, and do not collect protected classification characteristics or biometric information, and — except for Message contents, discussed below — do not collect sensitive personal information.
Note on the messaging-related categories (professional information and education information): These reflect limited collection that occurs only through the messaging feature — for example, a Teacher User's Program affiliation, and Messages or child information that may constitute "education records." We do not sell or share this information, and where it relates to a Program's enrolled children we process it as a service provider on the Program's behalf.
The contents of Messages exchanged through the messaging feature may constitute "sensitive personal information" under Cal. Civ. Code § 1798.140(ae), because NEWay is not the intended recipient of those communications. We collect and process Message contents only to provide the messaging feature, maintain security and integrity, and comply with law — purposes permitted under Cal. Civ. Code § 1798.121(d) — and we do not use Message contents to infer characteristics about any individual. We do not otherwise collect sensitive personal information (such as government IDs, financial account credentials, precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, genetic data, biometric information processed for identification, health information, sexual orientation, or neural data).
Because we collect and use sensitive personal information only for those permitted purposes, and do not use it to infer characteristics about individuals, the "right to limit the use and disclosure of sensitive personal information" under Cal. Civ. Code § 1798.121 does not currently apply to our processing. Messages are exchanged between participants who choose what to send; we do not read Message contents to derive sensitive personal information, and we ask Users not to include sensitive details in Messages. If our practices change, we will update this Policy and provide the required notice and "Limit the Use of My Sensitive Personal Information" link.
When you use the messaging feature, we collect and process:
We use this information only to operate the messaging feature, deliver and display Messages, maintain safety and security, and comply with law. We do not use Message contents or child information for advertising, for cross-context behavioral profiling, or to train public AI models. Where a Program has enabled the feature, we process this information as the Program's service provider, on its instructions.
We use personal information, as permitted by law, for the following business and commercial purposes (as those terms are used in Cal. Civ. Code § 1798.140):
Operating the messaging feature so teachers and parents can communicate about enrolled children, including delivering, displaying, and storing Messages.
We do not use your personal information for purposes that are incompatible with those disclosed above without first providing additional notice as required by Cal. Civ. Code § 1798.100(a)(3).
We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising, as those terms are defined under the CCPA. We have not done so in the preceding 12 months.
We may disclose data for business purposes in the following limited circumstances:
We retain personal information only as long as reasonably necessary to fulfill the purposes for which it was collected, including to:
In practice, we apply the following category-specific retention periods (as required by Cal. Civ. Code § 1798.100(a)(3)):
Once data has been irreversibly de-identified or aggregated such that it can no longer reasonably be linked to you, it is no longer considered personal information under the CCPA.
We use and maintain reasonable security procedures and practices appropriate to the nature of the personal information we collect, as required by Cal. Civ. Code § 1798.81.5, including encryption in transit (HTTPS / TLS), encryption at rest, access controls, security monitoring, and least-privilege access policies.
However, no method of storage or transmission over the Internet is 100% secure. While we work to protect your data, we cannot guarantee absolute security. You use the Services at your own risk.
If we become aware of a breach of the security of the system involving unencrypted personal information, we will notify affected individuals and, where required, regulators, in accordance with applicable law — including, for California residents, Cal. Civ. Code §§ 1798.29 and 1798.82, with notice to the California Attorney General where more than 500 California residents are affected.
Your data may be processed in countries where we or our service providers operate, including the United States and other jurisdictions that may have different data protection laws than your home jurisdiction.
When we transfer personal data internationally from a jurisdiction that restricts such transfers, we use appropriate safeguards to comply with applicable laws, such as Standard Contractual Clauses or other legally recognized transfer mechanisms.
If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions and verification requirements:
Requests involving messaging data and Programs. Where Messages or child information are processed on behalf of a Program (as education records or otherwise), your request may be directed to, or require coordination with, the Program, and certain information may be subject to the Program's control and recordkeeping obligations. We will route or forward such requests as appropriate and explain where the Program is the right point of contact.
How to exercise your CCPA rights. You may submit a verifiable consumer request by emailing support@NEWayHealth.com. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days, with one 45-day extension where reasonably necessary. You may make a request twice in any 12-month period at no charge.
Authorized agents. You may designate an authorized agent to submit a request on your behalf. We may require the agent to provide signed permission from you, and we may require you to verify your own identity directly with us and to confirm that you provided the agent with permission.
Verification. To protect your information, we will need to verify your identity before responding. The verification method will depend on the sensitivity of the information requested. For most requests, we will ask you to confirm information already associated with your Account (such as the email address on file).
California Civil Code § 1798.83 permits California residents who have an established business relationship with us to request certain information regarding our disclosure of personal information to third parties for those third parties' direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
In compliance with California Business and Professions Code § 22581, registered users who are California residents and under the age of 18 may request and obtain removal of content or information they have publicly posted on the Services by contacting us at privacy@NEWayHealth.com. We will make a good-faith effort to remove the content or information; however, we may not be able to ensure complete or comprehensive removal (for example, the content may remain in backup copies).
You may request full deletion of:
Your participation in the messaging feature and the Messages associated with your Account, to the extent technically feasible — subject to the recipient's and Program's retained copies and any recordkeeping the Program is legally required to maintain.
We may retain certain information as permitted by law (for example, for fraud prevention, legal compliance, or to complete a transaction you initiated).
NEWay is designed for use by adults (parents, legal guardians, and teachers), not children. We do not knowingly collect personal information directly from children.
Through the messaging feature, however, adults submit information about identifiable children. We handle that child information consistent with the principles of the federal Children's Online Privacy Protection Act ("COPPA"): we collect only what is reasonably necessary to operate the feature, we do not condition a child's participation on disclosing more than is necessary, we do not use child information for advertising, and we do not disclose it except to the connected teacher(s), parent(s)/guardian(s), the relevant Program, and our service providers under contract. Where required, we rely on the Program or the parent/guardian to provide any consent the law requires before communication about a child begins.
If we learn that a child under the age of 13 has provided personal information directly to us, we will take steps to delete such information promptly in accordance with the federal Children's Online Privacy Protection Act ("COPPA").
For minors aged 13 to 16, we do not have actual knowledge that we sell or share their personal information, and we would not do so without affirmative authorization as required by Cal. Civ. Code § 1798.120(c).
Where a Program enables the messaging feature, some Messages and child information may qualify as "education records" under the federal Family Educational Rights and Privacy Act ("FERPA"). In that case, NEWay acts as a service provider performing a function the Program would otherwise perform itself, under the Program's direct control. We use education records only to provide the feature to the Program and its families, do not re-disclose them except as the Program directs or the law permits, and do not use them for our own purposes.
To the extent California's Student Online Personal Information Protection Act ("SOPIPA," Cal. Bus. & Prof. Code §§ 22584 et seq.), the Early Learning Personal Information Protection Act ("ELPIPA," Cal. Bus. & Prof. Code §§ 22586 et seq.), which extends similar protections to information about preschool and prekindergarten students, or similar student-privacy laws apply, we will not: use covered student information to engage in targeted advertising; build a profile of a student except in furtherance of the Program's purposes; sell covered student information; or disclose it except as those laws permit. We maintain reasonable security for covered student information and will delete it at the Program's request.
Parents and guardians who wish to access, review, or correct their child's education records should contact their Program, which controls those records. We will support the Program in responding to such requests.
NEWay does not collect, process, or store personal information for the purpose of providing medical, psychological, or therapeutic services. All data handling is directed toward non-clinical, educational parenting support and the operation, security, and improvement of the app.
Specifically, NEWay:
Any general wellness or educational information provided through the Services is intended solely for non-clinical, educational purposes and is not "medical information" as defined under Cal. Civil Code § 56.05(j). The messaging feature is for everyday educational communication between teachers and parents and must not be used to exchange clinical, diagnostic, or treatment information; we ask Users not to include such information in Messages.
NEWay uses AI to generate scripts and suggestions based on your inputs and preferences. These outputs are meant to support your decision-making as a parent, guardian, or teacher; they do not make binding decisions about you or your child.
We do not use solely automated decision-making to produce legal, financial, or clinical decisions about you, and we do not make decisions that have legal or similarly significant effects solely based on automated processing.
We will provide additional disclosures and choices regarding "automated decisionmaking technology" if and when required under California Privacy Protection Agency regulations (Cal. Code Regs. tit. 11, § 7000 et seq.), as those regulations become effective.
We may update this Privacy Policy from time to time as our practices, the Services, or legal requirements evolve. The "Last updated" date at the top indicates when the Policy was last revised.
If we make material changes, we will notify you via email, in-app notice, or a prominent notice on our website, where required by law. Your continued use of the Services after changes take effect means you accept the updated Policy.
If you have questions, concerns, or requests relating to this Privacy Policy or our handling of personal information, please email support@NEWayHealth.com.
Notice to California consumers under California Civil Code § 1789.3: The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.